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[57] ABSTRACT 

The present invention teaches a method of generating a 
plurality of random numbers is disclosed. The method 
coiiq)rises the Initial step of generating chaotic noise. 
Subsequently, the chaotic noise is sampled such that a 
plurality of sanq)les are created. Each sainple of ttie plurality 
of samples is then converted into digital data such diat each 
converted san^de corresponds with a random number of the 
plurality of random numbers. 
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RANDOM NUMBER GENERATING SYSTEM of purposes, and arc commonly available used in simula- 

AND PROCESS BASED ON CHAOS tions and games. Typical pseudo-random number generators 

are based on linear feedback shift registers or linear con- 

FIELD OF THE INVENTION gruential generators (often in^lemented in software). Given 

* . i. * 5 the algorithm and current state (e.g,, values of computer 
The present mvention relates to cryptogrffl)hy, and more • ui v j a 7 ^vixi^uw-i 
particukriy to a process and systemto gfn«a4,g random '^fTTJ"^."^' ^"^^^ n.mA« generator out- 
numbers based on chaos, put can be K^yrephcated. Because this infoimauoniiiay 

be obtamed by mspecting one or a few values in a sequence, 

BACKGROUND OF THE INVENTION ordinaiy pseudo-random number generator are unsuitable 

10 for our purposes. 

Pseudo-random number generators arc well known in the Cryptographically secure pseudo-Fandom number genera- 
cryptographic sciences. Cryptography is defined as the art tors are special pseudo-random number generators that have 
and science of preventing eavesdroppos from understand- been designed to resist attempts to determine the cuirent 
ing the meaning of intercepted messages. In such security state via examination of the generated random number 
minded applications, pseudo-random as well as truly ran- 15 stream. They typically assume that the adversary has com- 
dom number gen^ators can be used to support the encryp- plete access to the algorithm, but not to the current state 
tion and decryption of information. These number genera- values. Such generators are, however, deterministic, 
tors are commonly employed for two separate purposes: 1) Therefore, if security of the cuirent state is breached by 
to generate "secret Icey" infonnation to be used as either a cryptanalysis or other method, all numbers created by the 
shared secret key or public+privatc key set for cryptographic 20 generator in the future (and, in many designs, the past) may 
encoding and decoding of infonnation, and 2) to genearate a be deduced. Work in this field has traditionally assumed that 
stream of numbCTs that is used to obscure message contents. the legitimate owner of die generator can be trusted not to 

In a secret key application, a small set of secret numbers ^^^^^ exploit knowledge of the current generator state, 

is used as a cryptographic key for encoding as well as However, a defecting employee or industrial espionage may 

decoding messages, It is vitally important that this key not compromise a cryptographically secure generator, so it is 

be known by unauthorized parties, n<ff discernible via cryp- unsuitable for our purposes. 

tanalysis to unauthorized parties based on knowledge of ^ 'truly random** sequence of numbers is one in which 

messages. Thus, it is desirable to use a sequence of appar- ^ theoretical basis for stating that no mathematical 

cntly random numbers in order to manufacture a plurality of scientific method can predict the next number in the 

secret keys. We define an "apparentty random" number as a sequence given an arbitrarily long past history of the 

number within a sequence of nunabers such that there is no sequence behavior. In particular, there is absolutely no 

practicable way to reconstruct that particular number's value pattan, correlation, nor dependency between numbers in the 

nor substantially narrow the set of possible values of thai sequence other than chance patterns. Gena-ation of truly 

particular number, even given access to the algorithms, random sequences typically requires physical measurement 

equipment, and all other numbers in the sequence. quantum mechanical uncotainty such as radioactive 

An inexpensive manufacturing process for secret keys ^^"^^^ While truly random numbers perfert fcff use as 

poses special requirements on generating random or pseudo- apparently random numbers, measurement equipment of this 

random numbas. In particular "^^^ ^^*^y available. Also, there is a low probability, 

1^^, . , . -1 ui t- . ^ but no guarantee, against subsequences of random numbers 

1) Only widely available off-the-shelf eqmpment may be 4^ repeating 

used in order to minimize procurement, maintenance, **ChaoticaUy« generated numbers can be created by 

ana repair costs, repeated experimental trials using a chaotic system with 

2) It must not be possible to reproduce the sequence of quantized outcomes, sudi as a coin or set of dice. In a 
numbers used to create die secret keys, and even by the chaotic system, outcomes vary greatty and nonlinearly 
manufacturer while in fuU possession of all equipment 45 according to minute variations of initial experimental con- 
and algonthms used m the process; and ditions. Therefore small sources of experimental error that 

3) There must be a guarantee of no duplicate secret keys are inevitably present in the physical worid are magnified to 
ever being generated and, at the same time, no record the point that it is impracticable to correlate system ou^uts 
of the actual key values may be retained by the manu- (numbers) with available measurements of system inputs 
facturer. 50 (initial conditions). Generating large volumes of chaotic 

The crux of the manufacturing process is inexpensively experimental results has in the past required special-purpose 

creating a stream of apparently random numbers. This hardware such as a nonlinear oscillator, which is not readily 

description concentrates on the application of generating available. Furthermore, there is no guarantee that chaotically 

apparently random numbers for "secret key" creation, widi generated random numbers will not repeat due to eithtt 

the understanding that the discussion applies equally to 55 chance or unexpected biases within the experimental appa- 

gencrating any stream of apparently random numbers, such ratus. 

as that used by traditional one-time padA^emam cypher One approach to generate apparently random number 

encryption techniques. generators has been to utilize deterministic mathematical 

A traditional way to create apparently random numbers in algorithms that compute simulations of chaotic systems, 

low-security applications is to use pseudo-random number 60 Because such simulations are computed using exactly sped- 

gcnerators. Pseudo-random numbers are created using a fied numbers representing initial conditions, the source of 

deterministic algorithm. The goal of an ordinary pseudo- apparent randomness due to mimite variation of initial 

random number generator is to produce a sequence of conditions is lost when performing simulations instead of 

apparently random numbers, assuming that any potential physical experiments, TTicrcfQrc, these approaches are deter- 

adversaiy has neither access nor desire to understand the 65 ministic and therefore vulnerable and subject to attack and 

generating algorithm- Pseudo-random numbers can serve as compromise if the particular diaotic formula bcmg used 

an approximation to truly random numbers for a limited set becomes known (for example, by examining the relevant 
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patent) oi deduced by cryptanalysis. Similarly, several digital data sudi that each converted sample ooirespoads 

pseudo-random Dumber generators are known to be based on with a random number of the plurality of random numbers, 

algorithmio-based recursion formulas, and are also subject In an alternate embodiment of the present invention, a 

to compromise. plurality of samples correspond with a single random num* 

Often, strategies enq)loyed in pseudo-random number 5 bet 

gencratcr designs have relied upon specialized digital hard- Furthomore, a system of generating a plurality of random 

ware. One such method uses a linear feedback shift register numbers is also disclosed. The system comprises a chaotic 

("LFSR") for obtaining an n-bit pseudo-random number by noise generatca: for generating chaotic noise, and a recording 

serially shifting out n bits from the shift register or shift device for sampling the chaotic noise such that a plurality of 

register chain during a substantially long poiod outside the lo samples are created. Moreover, a digitizer is incorporated fca: 

purview of potential eavesdroppers. For example, a sixty- converting each sample of the plurality into digitd data such 

four (64) bit maximal lengdi LFSR running at a clocked that each converted sample of the plurality corresponds with 

frequency of 1 MHz could be san^led every few seconds to a random number of the plurality of random numbers. In an 

approximate a random number stream and be guaranteed not alternate embodiment of the present invention, a plurality of 

repeat to itsdf for 585,CXX) years. However, the LFSR 15 samples coircspond with a single random number, 

approadiis stiUdetenmnisti^^ advantages and objects will become 

states can be predicted when the present state of the shift j ^ ^^^^ in the art from the foUowing 

register is known. For example, purchase and reverse- ^^^^ description read in conjunction with the appended 

engme«ing of a single manufactured umt to determine its ^^^^ ^^^^ 

secret key value would allow mtelligent guessing of the 20 

values of other units manufactured in the same or proximate BRIEF DESCRIFnON OF THE DRAWINGS 
batches. 

As a result of these problems and in view of the growth The present invention will be better understood from 

erf oyptographic applications, a demand exists for a random reading the following description of non-limitative 

number generator which is not deterministic, can be imple- 25 embodiments, with reference to the attached drawings, 

mented with commonly available equipment, and which is wherein below: 

guaranteed not to generate duplicate secret keys. A need FIG. 1 illustrates a block diagram of the preferred 

fruther exists for such a random numbo* genwator from embodiment of the present invention; 

which results cannot be duplicated, even by the designer or FIG. 2 illustrates a high-level overview flowchart of the 

seaet key manufacturer. 30 preferred embodiment of the present invention; 

For Ae remainder of this document, we shaU use the j^q 3 juustrates a more detailed flowchart of the first 

unqualified twm Worn nmnber to denote an apparendy 3^^^ ^ piefeacd embodiment of the present 

random number. While it is understood that truly random invention* and 

number generation Is not being discussed, apparently ran- ^ , ^ 

dom numbers are considered 'Yandom" for cii^ 35 . I^G.4illi^trates amored^edflow^of ft^ 

^ ing steps of die preferred embodiment of the present mvcn- 

DBCLOSURE OF THE INVENTION tion. 

nie primary advantage of the.present invention is to ^'^''^'^ ^ emphasized tiiat the drawings of the instant 

overcome the limitations of the pricr art. appkcation arc not to scale but arc merely schematic rcpre- 
^ ^ . .^dn sentations and are not intended to portray the specific 

«dvantoge of the present invcntian is to provide ^ ^ ^aural details of £e invention, wUch 

a method and sy rtem for generating a nuniber stream that, ^ ^ detenmned by one of skiU in the art by examination 

using the inost advanced cryptonalytic and statistical mcth- i„fonnation herein, 
ods available, is indistmguisbable from a troly random 

numba stream. DETAILED DESCRIPTION OF THE 

Another advantage of the present inventian is to provide *^ INVENTION 

* '"^'^ Rearing to FIG. 1, a block diagmn of the preferred 

is non-acterministLC. embodiment of the present invention is illustrated depicting 

Another advantage of the present invention is to provide 3 systems for generating a plurality for random numbers. As 

a method and system for guaranteeing that no particular ^ become evident upon understanding the present 

subsequence of random numbers <x derivative value is used disclosure, and the preferred embodiment paiticulariy, sy^ 

twice while at the same time eliminating vulnerabiUties t^j^ 5 randomly generates a sequence of secret identification 

associated with keeping records of values generated numbers, hereinafter referred to as 'IDs," EachID generated 

A further advantage of the present invention is to provide is associated with a fob of a remote keyless entry system To ' 

a method and system for generating random numbers which 55 improve and ensure the security of such an entry system, 

is immune to attack and compromise, even firom the manu- cryptographic security is incorporated to substantially 

facturer of the random numbers. restrict the opportunity to con^iromise any random ID 

Yet still auodicr advantage of the present invention is to generated by system 5. 

provide a method and system for generating random num- To realize the aim of generating random IDs, system 5 

bers which utilizes the apparently random nature of chaotic 60 comprises a chaotic noise source 10 for generating chaotic 

systems generally. noise. In one embodiment, chaotic noise source 10 00m- 

In order to achieve the advantages of the present prises an electromechanical generator for generating turbu- 

invention, a method of generating a plurality of random lent air flow. 'Hirbulent air flow comprises characteristics 

numbers is disclosed. The method comprises the initial step that may be classified as randomly occurring in' nature, as 

of generating chaotic noise. Subsequentiy, the chaotic noise 65 opposed to those elements having a pseudo randomness 

issampledsuchthataplurality of samples are created. Each resulting fi'om simulated chaos created by deterministic 

sample of the plurality of san^les is then converted into mathematics. In the preferred embodiment of the present 
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invention, the turbulent air flow ou^ut of the chaotic noise between converted samples. It is known that data input into 

generator 10 is generated by a small, high-air-volume, sequential array bytes may result in data correlations 

genoically "noisy" fan because it provides turbulent air flow between adjacent bytes as source may be sampled at a speed 

and creates noise that is inherently chaotic. It should be Tnadh slower than the Nyquist frequency of 2 times the 

parent (hat a spectrally pure noise source, such as a pure 5 dominant frequency components. As such, to obscure these 

sinusoidal tone, is highly undesirable. correlations, the data is scattered through array 32 as it is 

System 5 further comprises a recording device 15 for ^o^ected It should be noted tfiatwh^^^^ 

^turing theum^^^^ ^^^S^t^S" " 

device IS. Reooiding device 15 records the chaotic noise , , j . j. . . . . 

output generated by chaotic noise source 10, as weU as (he lo ^*eprrfen«d embodiment array 32 composes a width 

ambient noise and any other extraneous sounds, such as fan ^^ff^ '^"^ « ^J"** ^ ^« 

motor noise, uniquely present at its particular spatial coor- V^.^"!''^!^^'' scatemg function of 

dlnates. In the prefenedembodimeii, recording device IS fhuflmg each digital date set is accomphshed by maement- 

comptises a microphone positioned in reasonably proximate "'Sthe memory array address by a number relatively prime 

distance to the chaotic noise source 10 forieccaiing the air U ^ sat^lh wrap around for each sampled data set 

flow around the microphone. H should be apparent to one of ^^f^ a number relatively pnme to the array size ensures 

ordinary skill in the art that the relevant amplitudes of the ^^J^ array element recwve preasely one data point As 

sounds and noises recorded by recording device IS when JS.sdected to be approximately the 

combined with self-noise fiom turbulent air flow over and ^^V^* size for maximum dispersal of data 

around recording device 15, are unique, and as such, may 20 P^""^: ^ 1™*="= ^ *e domhiant fequencies of 

not be reproduced as the coordinates of the device IS are distmct from the frequency at 

inhabited by only one spaSisH element ^ '^^^ ^8 "^"y waps around. 

Onceihe chaotic noise generated by source lOisrecorded ^.^t^ZfjjnlifT^'"'^' ^ "^f ""^ 

by device IS, the resultLt recorded sound is fed into a ^jl ^JT^T^,'^ ^ f,^'^, ^ 

computer20.andmoreparticularly sampleranddigldzerlS. « ^„ * <!■ "1 ?f "^n" 

Sadler and digitizer 25 perfonnslS^o functions. First, f^"" ^ "J^^^y- Jata stream is genetaUy 

sampler and di^tizer 25 samples the resultant recorded I*? ^.f ""^"^ <*f associated with each 

s^ recorded by recordingTvice IS at aTSeSS SSL't?/, ''I'^l '^"^^^^ ^* 

frequency. In the preferred ^dlment. the ^edetemiined ttt^^!^^,t^^J^^JZ^'^y''°^^ "^l 

fre^uen<^ is lowcTthan the operating frequency of the &n '° ^IT^TI.^J^I^^I''^^''- T^."^ 

gcnexatiiig the mrbnlent chaotic noisl Zf^^J^J^ '^T. ^'^tl" 

. .... „ . , mfonnationentropy.Asoonmlelelyiandomdatahasentropy 

As a result of samplmg the recorded sound^ sampler and ^ one Wt of entropy pei bit of data, compressed data is a 

digitizer 2S generates aphirahty of samples. Theplurality of prefared approximation of randomne«»When compared 

^'^^^f^^^'^^'&^^y^'^'^^&^'^&^^J^y^^' 35 with non-conqaesscd data. Thus, oompiessing data prior to 

SUA that each sample is converted into a digital date se^ perfonning subsequent encryption is preferred as it hampers 

whidi m one embodiment comprises 8 tals. In the prrferred attacks based on data frequency analysis, 

mbodunent of the present invention, both functions of embodiment, each digital data set has 

been shu^d prior to executing the con^sing step. By 

ASS&nr^r « P«rfonm8«>SttssiononeachdigitaldLset,!a^nmn- 

^ , . ber in tiie resultant con^xressed data set is a random number 

Moreover, system 5 additionally comprises a within a predetamincd set of numbers that has an equal 

microprocessor/nncrocontroller 35 and a memory 30. probabiUty of being generated by system 5. Various com- 

Microprocessor 35 performs a series of algorithmic func- passion tcdmiques are known to one of ordinary skill in the 

Uons stored in memory 30 for obscuring the random num- 45 art, such as for exanmle PKZIP compression and UNIX 

bers generated, insuring the randomness of the random compression, though Huffman encoding is preferred HufF- 

numbers generated, encrypting the random numbers to pre- nian encoding entails a byte by byte conmression technique 

vent reverse engineering, as well as reducing chelations wherein the number of occurrences in the 8 Kbyte data input 

between samples. As a result of pafonning these algorith- set of byte values from 0 to 255 is tallied. Each byte value 

mic fimctions, as overviewed in HG, 2, a random number 50 is assigned a bit string, with shorter strings assigned to more 

ou^ut is generated. frequent byte values. Id the event aU 256 values of the 8 bit 

It should also be apparent to one of ordinary skill in the input occur with equal probability, the data is unaffected, 

art that while these algorithmic functions are derailed as However, as is much mere Likely the case, in the event that 

being performed serially by a microprocessoa-, scvaal may the probabiUty distribution of inputs is nonuniform, the 

be performed in some parallel manner. Likewise, the order 53 Huffman encoding process substitutes a sequence of varying 

for which these functions may be performed may be vari- length bit streams for the anay of byte values. It should be 

ously arranged. However; it should be to one of ordinary apparent to one of ordinary skill in the art that as the lengths 

skill that either of these options presents diminished and/cr of the bit strings vary in relation with the input byte 

substandard random number generation. probability distribution, numerous ou^ byte values exist 

Referring to FIG. 3, the derailed 5tq>s of the preferred 60 irrespective of the repetition of the sequence of iiiput byte 

embodiment for generating a stream of apparently random values due to undesirable correlations. As such, Hufhnan 

numbers. Hie first function performed by microprocessor 35 encoding is the preferred comprcs sion technique, 

is the algorithmic stq) of shuffling each data set. Upon A third algorithmic step performed by microprocessor 35 

receiving a digital data set of each converted sample, micro- is one way encrypting data set lb insure against compro- 

processor 35 positions the digital data set into a data array 65 mise by prediction techniques, each conqsressed sample is 

32— which in the preferred embodiment is 8 Kbytes in one way encrypted. The step of one way encryption is 

size— using a stride for obscuring sampling carelations perfcrmed for two essential reasons. First, encrypting the 
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input bits insures the randomness of the resultant numbers Referring to FIG. 4, a flowchart of a method to convert the 

generated by system 5. Second, performing a one way random byte values 64 into ID values is illustrated With a 

encryption step frustrates attempts to sample the random stream of random byte values generated, several additional 

data stream for extrapolating other generated values based steps may be performed to realize a secret identification 

on attempts to model fan noise. 5 value. This is of particular significance where a secret 

In the preferred embodiment, the one way encryption number is required to uniquely identify a particular object, 

technique of choice is MD-5. This selection is based on such as a keyless entry fob in the preferred embodiment, or 

several factors, including the fact that MD-5 is a one way a cellular phone for example. 

hash function with no cryptographic key requirements. The first step performed on die stream of random byte 
MD-5 is inherently irreversible because it reduces a 64 byte values involves a determination as to whether a secret 
input array to a 16 byte output array, making brute force identification number is needed. This is particularly of note 
attacks based on guessing inputs inqpractical; one of 4=10^^^ in the preferred embodiment where fob transmitters arc 
inputs. As such, recovery of the original data stream is made manufactured as part of a remote control keyless entry 
impossible, even by the original cnoyptor. Moreover, MD-5 systems. Here, the fob programmer examines the present 
comprises a uniformly distributed probability of output bit need for a secret identification number for downloading 
values when given inputs with essentially any set of varying during production. In the event the programmer concludes 
input values. It should be apparent, however, that the MD-5 the answer as being a negative, the random byte stream is 
approach may replaced by various other encryption methods discarded while new values are continuously generated, 
in view of the instant disclosure, including MD- 2 However, should the programmer ascertain that a seaet 
encryption, MD-4 encryption, SHA encryption, SNEFRU identification number is required, the random bytes values 
encryption, as well as other techniques apparent to one of 20 generated are used as a basis for creating the number. This 
ordinary skill in the art in view of the present invention. process cf creating the secret identificatioD number is real- 
To further insure the randomness of the numbers gener- ized by utilizing the random bit stream to select actual secret 
atcd by system 5, in an alternate embodiment of the present identification numbers. The secret identification values gen- 
invention, an additional algorithmic step is performed by crated faU within three categories: linear feedback shift 
microprocessor 35. Here, a portion of each compressed 25 register fLFSR"), cyclic redundancy code ("CRC"), and 
san^le preferably or in die alternative a portion of each data other values. 

set are input to a logical exclusive OR ("XOR") gate 38 The LFSR values are selected to correspond with maxi- 

siinultaneously with an ind^ndently varying, guaranteed mal length feedback polynomials. These arc feedback terms 

non-repeating value, preferably the date and time of day. The that, when used in an LFSR, produce sequences that cycle 

ou^ut of the XOR is then one way encrypted algorithmic 30 through all possible values except zero before rq>eating. 

step by microprocessor 35, In so doing, some variation is Selection of both 20 bit and a 19 bit feedback terms is 

instituted in tiie input of the one way encryption algorithm accomplished by using the random byte stream to randomly 

in the event an unintentionally repetitive data input exists. select an entry in a file with preconqiuted maximal length 

As a point of illustration, it should be apparent to one of LFSR feedback terms. 

ordinary skill in die art that sin^)ly running the time of day 35 Similarly, the CRC values are selected to correspond to 

or a counter output du-ough an MD-5 encryption scheme feedback polynomials that have a mixture of one and zero 

would be vulnerable to attack by someone who knows the bits. The selection crit^a used is that random bytes are 

process and guesses the time of day while looking for a employed for the feedback terms, but bytes having fewer 

matching output than two "one" bits or fewer than two **2ero** bits are 

As a result of the hereinabove algorithmic steps, a one 40 discarded. Thus, each byte of the 39 bit CRC feedback 

way encrypted random number ou^ut is genert^ by polynomials is guaranteed to have no more than 6 bits of the 

conq)uta^ 20, and more particularly microprocessor 35. This same value. Of course, the top polynomial bit is forced to * 1' 

ou^t is conqjriscs a stream of random byte values 64. Each while the bit above that is set to *0* in view of the fact that 

random byte value comprises a uniform probability of the 39 bit polynomial is contained in a 40 bit set of bytes, 

distribution with respect to a predetermined range. 45 Given that some byte values are discarded, there are 

In stiU a further embodiment of the present invention, (238**5)/4 or 190,908,292,792 possible values for the CRC 

duplicate encrypted random numbers of the random byte feedback term, wherein the 5 resents the number of bytes 

stream generated by computer 20 are eliminated to further with 238 possible values each, and die four corresponds with 

ensure the security of the random numbers. Here. dupUcatc ^le number of constant values of the top two bits, 

san^les in the ou^ut of computer 20 are detected by means 50 As for the third category of seaet identification values, 

of a comparator 40 for comparing each of random number the other values are selected by simply using the random 

sample widi each other random number sample. It should be byte stream values. In the case of initial LFSR values, a 

noted that this may also achieved within conqiutcr 20. To non-zero random value is required, rejecting all zeros, 

effectively perform this function, comparator 40 comprises Thus, the feedback terms of a maximal length linear 

a memiOTy 42 for staring the plurality of encrypted samples. 55 feedback shift register (^TJSR") are randomly selected from 

Further, a discarding device or duplicate data dump 44 is a pre-computed list in a memory device. This results from a 

also inccrpcH-ated for discarding di^licates in the plurality of 20 bit LFSR feedback and a 19 bit LFSR feedback arrange- 

encrypted random numbers. It should be noted that while the ment Moreover, a cyclic redundancy checking ("CRC'O 

input of con^arator 40 is a plurality of one way encrypted, device subsequentiy screens feedback values using a 39 bit 

compressed and shufQed random numbers, the ou^ut of 60 CRC feedback configuration such that each byte has at a 

conq>arator 40 comprises number set that is not random, but least two logical 0 bits and two logical 1 bits. Hie remainder 

rather numbers with specific mathematical properties which of the process involves selecting other data fi-om the random 

are selected at random. This approach is of significance in byte stream as initial values. As a result, the output generated 

die preferred applications of the instant invention wherein a is a candidate 128 bit secret identification number. Prior to 

unique secret identification number is placed into a remote 65 acceptance, it must be demonstrated to be unique with 

fob transmitter for a remote keyless entry automobile sys- respect to all previously generated secret identification val- 
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Once the secret identificatioD aumbers are selected table value of 0, This unique resultant identificatioii number 

responsive to the random bytes values, a secret identification then causes the bitm^ t^le for the new digest value to be 

digest is computed. As the first step of maintaining the set to 1, indicating that the new identification number has 

uniqueness of all secret identification numbers, a secure ^en issued. By doing so, the programmer may transfer the 

digest of the candidate secret identification number is com- 5 next secret identification number to the object requiring a 

puted. This digest comprises a 32 bit number that is deter- seaet number. 

mlnistically computed firom the 128 bit identification num- Using the above process, a resultant secret identification 

bcr in such a way as to ensure knowledge of the 32 bit digest number may be programmed into a fob transmitter in a 

does not reveal any useful information about the original remote keyless entry vehicular system. Once residing within 

secret identificatioa number. As each distinct identification lo the fob transmitter, a base receiver of the remote keyless 

number can generate only one digest function, the unique- entry vehicular system may be programmed with the secret 

ness of the digest values are ensured which In turn assures identification number. By this arrangement, the secret iden- 

the uniqueness of the identification values. And as a number tification number is transmitted by means of the conpiter 

of distinct secret identification numbers formulate the same only a single time to insure against compromise as is well 

digest values, it is thus difficult to infer which secret 15 known in the ait 

identification number caused any particular digest value to While the particular invention has been described witii 

be generated. reference to illustrative embodiments, this description is not 

The secret identification digest may be realized by per- meant to be construed in a limiting sense. It is understood 

fonning a cryptographically secure hash function. While the although the present invention has been described in a 

MD-5 encryption method is the preferaible choice, MD-2, 20 i^cfoied embodiment, various naodifications of the lllustra- 

MD-4, SHA, SlsIEFRU encryption processes, as well as tive embodiments, as well as additional embodiments of the 

other techniques apparent to one of ordinary skill in the art invention, will be parent to persons skilled in the ait upon 

in view of the present invention may also be employed. The reference to this description without departing from the 

16 byte identification value is padded with zeros to form a spirit of the invention, as recited in the claims appended 

64 byte input. MD-5 then computes a 12S-bit result that is 25 hereto. It is therefore conten^}lated that the appended claims 

treated as four 32 bit words which are XORed together to will cover any such modifications or embodiments as fall 

form a 32 bit resultant digest value. This digest value is within the true scope of the invention, 

uniformly distributed ova: the range of a 32 bit values. All of the U.S. Patents dted herein are hereby incoipo- 

As a result of con:5)uting a secret identification digest, a ^^^^ ^ reference as if set forth in their entirety, 

bitmapped table of previously generated digest values may ^® claim: 

be checked for duplicates. It should be noted that the l.Amethodfor generating a plurality of random numbers, 

probability of an actual duplicate is vanishlngly small. Wth ^® method conqxrising the stq)s of: 

no *tsviddle factor," detailed as the value bit pattern 26 in generating naturally occurring diaotic noise; 

U.S. Pat No. 5398,284, commonly assigned with the sampling said chaotic noise such that a plurality of 

present invention, the possible number of combinations samples are created; and 

equal the product of the number (256) of ID byte values, the converting each sample of said plurality into a digital data 

count number (255) of LFSR initializer values, the count set such that each converted sample of said plurality 

number (2048) of LFSR feedback values, the identification corresponds wtth a random number of the plurality of 

number (8355,840) of LFSR initializer values, the identi- random numbers. 

ficationnumber(356,960) of LFSR feedback values, and the ^ 2. The method for generating a plurality of random 
number (190,908,292,792) of CRC feedback values, or numbers of claim 1, further comprising the step of: 
7.61xl0e^^ possible valid identification numbers. shuffling said digital data set of each converted sample of 
For randomly generating values, an approximation to the said plurality to obscure correlations between con- 
expected number of identification numbers for which a verted samples of said plurality, 
single duplicate will be generated is approximately (2V)**^' 3. The method for generating a plurality of random 
2, where V is the total number of possible of identification numbers of claim 1, further con^msing tiie step of: 
numbers. As 7.61xl0e^* possible valid identification num- cMnpressing said digital data set of each converted 
bers exist, one duplicate is expected to be generated for sample of said phirality such that the each random 
every (2x(7.61xl0e^*))**^ or 1.23xl0e" secret identifi- number of the pluraUty has an equal probability of 
cation numbers manufactured. Thus, where an identification being generated. 

number is generated once per second, one duplicate will be 4. TTie method for generating a plurality of random 

genaated eva7 390 million years. numbers of daim 1, further comprising the step of: 

However, human error, software bugs, and mechanical oneway encrypting said digital data set of each converted 

failure must also be considered. Thus, a (hiplicate checking 5 ^ sample of said plurality such that said digital data of 

function is performed. By checking for duplicates, a "col- each converted sample of said plurality is prevented 

lision" with previous digest values may be detected and from being ascertained. 

discarded to insure against the possibility that two secret 5. TTie method for generating a plurality of random 

identification numbers are generated. This is realized by first numbers of claim 4, further comprising the step of: 

con^aring the digest value with a list of all previously ^ examining said encrypted digital data sets of said con- 

gcncratcd digest values. Subscquentiy, new secret identifi- verted samples of said plurality for a duplicate 

cation numbers having duplicate digest values are discarded. encrypted digital data set; and 

As such, identification numbers generating a previously discarcting said duplicate encrypted digital data set 

encountered digest value having a bitmapped table value of 6. The method for generating a pluraUty of random 

1 are discarded. ^ numbers of claim 4, further con^xrising the step of: 

With potential diq)licates discarded, the next identifica- exclusively ORing a unique perspective marker with said 

tion number is input with a new digest value having a bitmap compressed digital data set of each converted sample of 



11/12/2003, EAST Version: 1.4.1 



5,696,828 

11 12 

said plurality to insure the randomness of the plurality 15. The process for geneiatiiLg a plurality of random 

of random numbers. numbers of claim 10, further comprising the step of: 

7. The method for generating a plurality of random examining each encrypted sample of said phirality for a 
nunibers of claim 1, wherein said step of generating chaotic duplicate encrypted san^le; and 

noise comprises the step of: 5 discarding said duplicate encrypted sample to insure the 

generating turbulent air flow. uniqueness of each random number of the plurality. 

8. The method for generating a plurality of random i6. The process for generating a plurality of random 
numbers of claim 7, wherein said step of generating turbu- numt>crs of daim 10, further comprising the step of: 

lent air flow comprises the step of: exclusively ORing a unique perspective marker with said 

operating a fan fear generating said turbulent ah: flow. ^° compressed digital data set of each converted sample of 

9. The method for generating a plurality of random said plurality to insure the randomness of the plurality 
numbers of claim 8, wherein said step of sampling is of random numbers. 

performed at a lower frequency than said fan operates. 17. The process for generating a plurality of random 

10. Aprocess for generating a plurality of secure random numbers of claim 16, wherein said unique perspective 
numbers^ the process comprising: marker comprises a time of day stan^. 

generating chaotic noise from turbulent air flow; 18. The process for generating a plurality of random 

san^ling said diaotic noise such that a plurality of numbers of daim 10, wherein said stq) of generating chaotic 

samples arc created; noisG from turbulent air flow comprises the step of: 

converting each recorded sample of said plurality into 20 operating a fan for generating said turbulent air flow, 

digital data set such that each converted sample of said 1*^. The process for generating a plurality of random 

plurality corresponds witii a random number of the numbers of claim 18, wherein said step of sampling is 

pluraUty of random numbers; performed at a lower frequency than said fan operates. 

shuffling said digital data set of each converted sample of 20. A system for generating a pluraUty of random 

said pluraUty such that ccwelations between converted 25 the system con^msmg: 

samples of said plurality are obscured; a chaotic noise generator for generating chaotic noise; 

compressing each shufQed sample of said plurality such a sampling device for sampling said chaotic noise such 

that the each random number of the plurality has an that a plurality of samples are created; 

equal fnrobability of being generated; and a digitizer for converting each sample of said plurality 

one way encrypting each compressed sample of said 30 into a digital data set; and 

plurality such that said digital data set is prevented a computer for shufQing said digital data set of each 

from being ascertained converted sample of said plurality, fox compressing 

11. The process for generating a plurality of random said digital of said each converted sample of said 
numbers of daim 10, wherein said step of shuffling said plurality, and for one way encrypting said digital data 
digital data set coiiq)rises the step of: 35 set of eadi converted sample of said plurality, such that 

positioning said digital data set of each converted san^le eadi converted sample of said plurality corresponds 

of said plurality into a data array using a stride to with a random munbo' of the plurality of random 

reduce sampling coirdations resulting from said step of numbers. 

sampling said chaotic noise. 21. The system for generating a plurality of random 

12. The process for generating a plurality of random ^ numbers of claim 20, wherein said con^uter comprises a 
nuihbers of daim 11, wherein said array comprises a width data array for receiving said digital data set of each con- 
and said stride comprises a size, and said width and said size verted sample of said plurality using a stride to reduce 
being a prime number. sampling correlations resulting from said sanq)ling of said 

13. The process for generating a plurality of random chaotic ndse by said sampling device, 
numbasofdaim 10, wherein said step of compressing said *5 22. The system for generating a pluraUty of random 
digital data conqnises at least one of the following steps: numbers of claim 21, wherein said array con^rises a width 

Huffman encoding said shuffled digital data set of each and said stride comprises a size, and said width and said size 

converted sample of said plurality; being a prime number. 

PKZIP compressing said shuffled d^ital data set of each 23. The syst«n for gena:ating a plurality of random 

converted sample of said pluraUty; and ^° numbers of claim 20, wherein said computer comprises at 

U>aX compressing said shuffled digital data set of each ^^^^ following: 

converted saiiq)le of said pluraUty. a Huffman encoder for compressing each converted 

14. The process for generating a pluraUty of random sample of said phffaUty; 

numbers of daim 10, wherein said step of one way encrypt- a PKZIP compressing device for compressing each con- 
ing said digital data comprises at least one of the foUowing verted sample of said pluraUty; and 
stq>: a UNIX compressing device for compressing each con- 
MD-2 encrypting each compressed sanqde of said plu- verted samiple of said pluraUty. 

raUty; 24. The system for generating a pluraUty of random 

MD-4 encrypting each compressed saiiq)le of said plu- ^ numbers of claim 20, wherein said computer comprises at 

raUty; least one of the foUowing: 

MD-5 enciyptmg each compressed sample of said plu- an MD-2 encryption device for encrypting said digital 

raUty; data set of each converted sample of said plurality; 

SHA encrypting each compressed sample of said plural- an MD-4 encryption device for encrypting said digital 

ity; and 65 data set of each converted sample of said pluraUty; 

SNEFRU caoypting each compressed sample of said an MD-5 encryption device for encrypting said digital 

plurality. data set of each converted sample of said pluraUty; 
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an SHA encryption device for eocryptuig said digital data 

set of each converted sanq)le of said plurality; and 
a SNEFRU encryption device for encrypting said digital 

data set of each converted sample of said plurality. 
25. The system for generating a plurality of random ^ 
numbers of daim 20, wherein said con^uter further com- 
prises: 

a comparing device for comparing each of said one way 

encrypted digital data sets of said converted samples of 

said plurality; and 
a discarding device for discarding a duplicate encrypted 

digital data set from each of said one way encrypted 

digital data sets. 
26* The system for generating a plurality of random 
numbers of daim 20, wherein said computer comprises: 
a logical exdusive OR gate fox exclusively ORing a 

unique perspective maikei with said conqiressed digital 
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data set of each converted san^e of said plurality to 
insure the randomness of the plurality of random num- 
bers. 

27. The system for generating a plurality of random 
numbers of daim 26« wherein said unique perspective 
marker con^rises a time of day stanq). 

28. The system for generating a plurality of random 
numbers of claim 20, wherein said chaotic noise generator 
for generating chaotic noise comprises an operating a fan for 
gen^ating said turbulent air flow. 

29. The system for generating a plurality of random 
numbers of daim 20, wherein said sanq>ling device samples 
said chaotic noise at a lower frequency than said diaotic 
noise generator operates for generating said turbulent air 
flow. 
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